Last Updated: [8/13/2026]
This Privacy Policy explains how Thread Work Digital (“Thread Work Digital,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal data when you visit our website [www.threadworkdigital.com], engage us as a client, or interact with our marketing campaigns run on your behalf (including Meta, Google, and other ad platforms).
Thread Work Digital is a “Data Fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) for data we collect directly, and a “Data Processor” for data we handle on behalf of our clients under service agreements.
Who This Policy Applies To
This policy applies to:
- Visitors to our website
- Prospective and current clients
- Individuals who submit their information through lead forms, landing pages, or ad campaigns we run for our clients
- Subscribers to our newsletters, WhatsApp updates, or promotional communications
If you are a lead or customer of one of our clients (e.g., a real estate developer, D2C brand, or FMCG company we run campaigns for), your data is primarily governed by that client’s own privacy policy. BrandLift processes such data strictly as instructed by the client under a signed agreement, and does not use it for our own independent marketing purposes without separate consent.
Information We Collect
a) Information you provide directly
- Name, email address, phone number, company name, and job title (via contact forms, WhatsApp, email, or calls)
- Billing and business details for client onboarding
- Campaign assets, brand guidelines, and business data shared for strategy or ad management purposes
b) Information collected automatically
- IP address, browser type, device type, and pages visited on our website
- Cookies and tracking pixels (Meta Pixel, Google Ads tag, Google Analytics) used to measure website performance and ad effectiveness
- Interaction data from ad campaigns we manage (clicks, form fills, conversions) via connected ad platforms
c) Information from third parties
Data from CRM or lead-management tools clients grant us access to
Data passed to us by ad platforms (Meta Business Suite, Google Ads, LinkedIn Campaign Manager) when managing campaigns on behalf of clients
Data from CRM or lead-management tools clients grant us access to
How We Use Your Information
We use collected data to:
- Respond to inquiries and provide client services (strategy, campaign management, content, reporting)
- Run and optimize paid ad campaigns on platforms like Meta and Google
- Generate performance reports and analytics for clients
- Send business updates, proposals, or invoices
- Improve our own website and services
- Comply with legal and tax obligations
We do not sell personal data to third parties. We do not use leads generated for one client’s campaigns to market to another client’s audience.
Legal Basis for Processing (Consent)
Under the DPDP Act, we process personal data based on:
- Consent: For newsletters, WhatsApp marketing, or website cookies, we rely on your explicit, informed consent, which you may withdraw at any time.
- Legitimate use: For client servicing, contract performance, and legal/tax compliance.
Where we act as a Data Processor for client campaigns, the client (as Data Fiduciary) is responsible for obtaining valid consent from their leads/customers. We contractually require clients to confirm they have lawful grounds before we run campaigns using their data.
Sharing and Disclosure
We may share information with:
- Ad platforms (Meta, Google, LinkedIn) as necessary to run and optimize campaigns
- Sub-processors such as email marketing tools, CRM software, analytics providers, and cloud storage providers, bound by confidentiality obligations
- Clients, for data collected through their campaigns
- Legal authorities, if required by law, court order, or to protect our legal rights
We do not share client business data or campaign performance data with other clients or competitors.
Cookies and Tracking Technologies
Our website uses cookies and similar technologies to:
- Remember preferences and improve site functionality
- Measure traffic and campaign performance (Google Analytics, Meta Pixel)
- Enable retargeting ads for people who have visited our site
You can control cookies through your browser settings. Disabling cookies may affect site functionality.
Data Retention
We retain personal data only as long as necessary for the purposes outlined in this policy, including:
Lead/inquiry data not converted to a client relationship is retained for a limited period and then deleted, unless you have opted into ongoing communications
Duration of the client relationship, plus a reasonable period for legal, accounting, or dispute-resolution purposes
Your Rights as a Data Principal
Under the DPDP Act, you have the right to:
- Access the personal data we hold about you
- Correct or update inaccurate or outdated data
- Withdraw consent for marketing communications at any time
- Request erasure of your data, subject to legal retention requirements
- Nominate a representative to exercise these rights on your behalf in case of death or incapacity
- Grievance redressal through our Grievance Officer (see Section 12) before approaching the Data Protection Board of India
To exercise any of these rights, contact us at [info@threadworkdigital.com].
Data Security
We implement reasonable technical and organizational safeguards, including access controls, encrypted storage where applicable, and restricted access to client ad accounts and CRM systems, to protect personal data from unauthorized access, alteration, or loss. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.
Children’s Data
Our services are intended for businesses and individuals above 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected such data, we will delete it promptly.
International Data Transfers
If any data is transferred outside India (for example, via ad platforms or software tools hosted overseas), we ensure such transfers occur only to jurisdictions or entities that maintain adequate data protection standards, in line with DPDP Act requirements and any government-notified restrictions.
Grievance Officer
In accordance with the DPDP Act and applicable Indian IT rules, our Grievance Officer can be reached at:
Name: [Ankur Saxena] Designation: Grievance Officer, Thread Work Digital Email: [info@threadworkdigital.com] Address: [Gwalior]
We aim to acknowledge grievances within a reasonable timeframe and resolve them promptly.
Changes to This Policy
We may update this Privacy Policy periodically to reflect changes in our practices, services, or legal requirements. The updated version will be posted on this page with a revised “Last Updated” date. Continued use of our website or services after changes constitutes acceptance of the updated policy.
Governing Law
This Privacy Policy is governed by the laws of India, including the Digital Personal Data Protection Act, 2023, and the Information Technology Act, 2000. Any disputes shall be subject to the exclusive jurisdiction of the courts in [Gwalior].